Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File:                     I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier:          7owatgnRayB4ikdae9xcZHoYUIdUTYJaqU3/mz2LpAc=
Subject key identifier:   0C:87:B6:24:64:FF:CF:A5:B7:8B:4E:B8:8A:63:AA:1A:07:78:6D:F9
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer:       /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial:       019F118A49AA1EA0491426087E6FCBF5E4AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number:          0A55
Signing time:             Mon 29 Jun 2026 04:01:43 +0000
Manifest this update:     Mon 29 Jun 2026 04:01:43 +0000
Manifest next update:     Tue 30 Jun 2026 04:01:43 +0000
Files and hashes:         1: 7JgH3BufGryuzD8TkhKGrSgU0Jw.roa (hash: dvhqnEVhtzVA7d1uxkYo+L/AWZ2qs2JaTtSDOyZBFEw=)
                          2: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: NGgMdlqRhym3OO+3U3+BiUvx5PjLwX2ye178AkARYj8=)
                          3: WZ2jJ_eUYCIdOJhT2cQcjz-Dw9w.roa (hash: DZZSiAeLEaIbjxQA8htWapoGDjJjgT0boPO+D7q1Tuc=)
                          4: jcxnuuzpk8YEGgKb-Yvf2uSR1-E.asa (hash: V2pEeg2ELyqXGtM9iC5bzhoziEpzlbl43BPulkWtu0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:8a:49:aa:1e:a0:49:14:26:08:7e:6f:cb:f5:e4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
        Validity
            Not Before: Jun 29 04:01:43 2026 GMT
            Not After : Jun 30 04:01:43 2026 GMT
        Subject: CN=0c87b62464ffcfa5b78b4eb88a63aa1a07786df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:66:b9:03:2f:88:be:b2:59:ad:b0:34:f7:3a:
                    5f:1b:1c:04:39:f8:41:b4:86:73:32:2e:47:dc:3e:
                    69:54:9f:8f:83:aa:53:ab:8d:e2:21:04:a5:37:3f:
                    d3:1f:ad:45:f2:fd:65:42:5d:c7:ba:5f:6c:3e:72:
                    89:a6:b5:01:b4:41:a4:22:31:52:3e:d9:9b:c7:b2:
                    97:12:eb:f0:9e:0e:0f:53:e0:78:79:d7:32:e1:49:
                    12:63:c0:f3:3c:af:74:0f:72:ef:d0:87:a2:d6:42:
                    27:2c:5d:17:66:42:4e:a8:23:f5:5e:0e:72:5c:f9:
                    56:95:a0:95:d3:0f:ea:b9:72:3c:0a:73:a1:d0:f3:
                    7e:89:fb:ad:84:5f:c5:4a:e8:49:bc:20:bb:ef:8c:
                    d6:21:fa:14:e2:45:23:07:fe:05:34:32:18:09:34:
                    7d:f9:28:85:67:e8:22:6a:b9:52:5d:6c:a4:d3:5f:
                    6b:ad:2d:e2:1f:28:ab:78:e0:15:30:71:f0:97:a6:
                    e1:0d:65:d2:ec:bd:78:cb:12:0d:25:2c:48:b5:92:
                    53:fc:13:c5:24:2f:3f:02:2f:54:58:c8:2b:70:7a:
                    d6:99:87:91:a8:1c:72:7a:92:65:2c:07:64:72:6d:
                    a3:10:c4:29:5e:44:43:75:e1:cb:51:6f:d9:f3:c8:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:87:B6:24:64:FF:CF:A5:B7:8B:4E:B8:8A:63:AA:1A:07:78:6D:F9
            X509v3 Authority Key Identifier:
                keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6d:f2:a0:2e:b0:a5:b5:66:35:68:5e:68:f4:50:db:23:59:
         b9:bf:7b:a5:20:ea:d4:26:24:fc:48:d4:c5:43:8f:31:3f:5d:
         8b:75:a3:67:b0:3e:2d:9f:fb:c5:be:5d:f8:aa:a0:87:cf:cf:
         ad:a0:e4:cc:bb:7d:a3:69:8f:53:cf:1d:f1:12:f2:6f:3d:71:
         63:ae:5f:22:a3:a1:eb:6d:f9:62:ee:a4:84:73:b8:ab:bb:fd:
         e5:7b:0f:5a:fd:36:4c:d6:ca:8b:d6:6d:20:10:91:fc:07:db:
         d4:90:f3:53:b5:52:53:7b:07:10:14:02:35:d5:5a:98:f8:77:
         21:15:c7:42:1c:19:9b:39:74:54:77:dc:08:92:31:00:90:25:
         40:7e:b1:09:ee:37:54:de:32:67:21:6f:fd:7e:6a:29:eb:01:
         51:c7:8a:98:e0:14:67:65:37:23:0a:b9:ca:7c:95:85:ae:5e:
         77:5c:0e:40:5f:41:18:9b:d8:30:68:b2:38:bb:46:4c:0f:f7:
         f9:96:4f:7f:32:45:44:55:37:48:e1:a3:e5:98:2e:9b:68:7f:
         b8:f1:95:d3:ba:70:c9:59:80:73:d1:c8:4f:d2:ff:3b:50:3a:
         62:82:2f:68:6d:fa:dc:1e:70:54:ba:7f:84:6e:40:10:6c:6f:
         41:72:4e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:09 2026 by rpki-client